L
Vendor security profile3 actively exploited CVEs
litellm
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs29
Critical5
CISA KEV3
Public exploit10
Patch rate%41
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
0
0
3
5
10
4
1
4
2
CVE KEV
CVE severity distribution
29toplam CVE
Critical5 (17%)
High10 (34%)
Medium7 (24%)
Low7 (24%)
Patch and exploitation view
%41
Verified patch
%10
CISA KEV
%34
Public exploit
12Patch available
0Partial
0Workaround
0Vendor: no patch
17Unknown
Latest vulnerabilities
8.8
CVE-2026-59822 Actively exploited
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
B
Patch verifiedEPSS %1
7.2
CVE-2026-59821
Code injection in Litellm
L
Patch verifiedEPSS %1
6.5
CVE-2026-59820
Path traversal in Litellm
L
Patch verifiedEPSS %1
4.9
CVE-2026-59819
Vulnerability in Litellm
L
Patch verifiedEPSS %1
9.8
CVE-2026-49468
Vulnerability in Litellm
L
Patch verifiedEPSS %3
9.8
CVE-2026-12773
Improper authentication in Litellm
L
Patch status unknownEPSS %1
8.7
CVE-2026-47102
LiteLLM < 1.83.10 Privilege Escalation via User Update
B
Patch verifiedEPSS %1
8.7
CVE-2026-47101
LiteLLM < 1.83.14 Privilege Escalation via API Key Generation
B
Patch verifiedEPSS %1
9.8
CVE-2026-42208 Actively exploited
SQL injection in Litellm
L
Patch verifiedEPSS %6
8.8
CVE-2026-42271 Actively exploited
Command injection in Litellm
L
Patch verifiedEPSS %93